Then why are you letting a machine you don't understand perform side effects that you don't vet, based on it's insane interpretation of untrusted data?
Sorry, I just don’t think this is a tenable or realistic way to approach dependencies in this day and age. If it works for you then I’m happy for you tho.
> Then why are you letting a machine you don't understand perform side effects that you don't vet, based on it's insane interpretation of untrusted data?
Browsers (and humans, actually) are subject to bugs that make them execute arbitrary commands from an attacker, and LLMs can be told to ignore undesired commands.
Unlike sending you an email, nobody's pushing you anything, though. You are actively pulling a program that explicitly says that you should not use it with an AI system.
It's like pulling a bunch of GPL code into your product and then complaining that it 'infected' the rest of your code. You actively chose to do that, nobody forced it upon you.